Received a ServerHelloDone handshake message while expecting CertificateRequest

[amanmahajan26]

While upgrading vector version from 0.20 to 0.26, I see a warning message being generated in the logs:

2023-01-09T12:30:35.784453Z  WARN rustls::check: Received a ServerHelloDone handshake message while expecting [CertificateRequest]

Has anyone else faced this issue?

[spencergilbert]

Hi @amanmahajan26, that's interesting - can you share the config your using?

[amanmahajan26]

@spencergilbert it is happening for the CloudWatch sink

2023-01-10T05:42:37.728947Z  WARN rustls::check: Received a ServerHelloDone handshake message while expecting [CertificateRequest]
2023-01-10T05:42:52.606243Z  WARN sink{component_kind="sink" component_id=main_cloudwatch_sink component_type=aws_cloudwatch_logs component_name=main_cloudwatch_sink}: rustls::check: Received a ServerHelloDone handshake message while expecting [CertificateRequest]

Config:

[sinks.main_cloudwatch_sink]
type = "aws_cloudwatch_logs"
inputs = [ "router_cw_output.cw_main" ]
create_missing_group = true
create_missing_stream = true
group_name = "{{ group_name }}"
compression = "gzip"
region = "eu-central-1"
stream_name = "{{ stream_name }}"
healthcheck.enabled = false

[sinks.main_cloudwatch_sink.auth]
assume_role = <IAM_ROLE>

[sinks.main_cloudwatch_sink.encoding]
codec = "text"

However, logs are still coming in CloudWatch.

[spencergilbert]

It looks like this is a spurious log (ref: rustls/rustls#1012 and rustls/rustls#1013), but it looks like the aws_sdk libraries haven't gotten that fix included and on top of that we prefer the use of native SSL over rustls.

I'll open an issue and see if we can get this resolved 👍

Opened #15905